Using attibutes

[Emmanuel BILLOT]

Le 21/05/2012 10:47, Alan DeKok a écrit :
> Emmanuel BILLOT wrote:
Hi,

Thanks for your answers.
So you mean that NAS (indeed access point for us) have to understand 
attributes. Any RFC that NAS doc may refer to ?

If there isn't any doc or attribut, do you know any way to managed users 
connexions when using EAP protocol ?

Regards,

>> Our WIFI access is managed by EAP-TTLS/EAP-PEAP with radius
>> authentication based on LDAP. So users can connect and use Internet,
>> however is possible to limit access (bandwith, connecting time) with
>> Freeradius ?
>    FreeRADIUS isn't a router.  See your NAS documentation for which
> attributes it needs to do access limitation.  Many NASes CANNOT do such
> limitation.
>
>> In other words, it seems (maybe i'm wrong) that Freeradius can send
>> attribut with values when answering with Access Accept packet. I guess
>> that clients have to understand it for being effective right ?
>    Yes.
>
>> So when using access point with EAP protocol, i guess native EAP client
>> have to be compatibe with an attribut list ?
>    No.  The EAP client is the end user PC.  Only the NAS needs to
> understand RADIUS attributes.
>
>> This behaviour seems to be implemented in captive portal, and attributes
>> can be managed in portal configuration. Is it possible with EAP access
>> (native client or secure w2 like ?)
>    No.  Captive portals are not compatible with EAP.
>
>    Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
Emmanuel BILLOT
CATEL - Dpt. Système et Réseaux
Rectorat - Académie d'Orléans-Tours
10, rue Molière - 45000 Orléans
Tél : 02 38 79 45 57